Privacy Policy

Your account data — the name, work email and password of the people who sign in. We are responsible for this.

Your employees’ data — the records your company puts into the product: names, contact details, employment details, leave, documents and pay. Your company decides what to collect and why; we process it on your instructions.

• To sign you in: name, email, a hashed password, and session records.
• To run the product: whatever your company enters — employee records, leave, documents, salary structures and payroll results.
• To keep it working and secure: technical logs including request times, error details and the IP address a sensitive action came from.
• To contact people: transactional email only — verification, password resets, invitations and payslip notices. No marketing email is sent from the product.

We do not sell personal data, we do not share it with advertisers, and we do not use one company’s data to build or train anything for another. Payslip notifications deliberately contain no figures and no attachment — only that a payslip exists.

We use a small number of suppliers to run the service: hosting and database infrastructure, object storage for documents, and an email provider for transactional messages. They process data only to provide those services to us.

Access is authenticated and permission-checked on the server for every request, and each company’s data is separated from every other’s. Documents are stored privately and served only after an authorisation check. Sensitive actions are recorded in an audit trail with who did them and when.

We keep your company’s data for as long as the account is open, because HR and payroll records generally must be retained. Audit trails and payroll history are kept even when a record is deleted from view, because their purpose is to show what happened. When an account closes we remove the data after a short recovery window.

Employees should contact their own employer first — the company controls its records and can correct them directly in the product. If you are one of our account holders, you can ask us to access, correct, export or delete your account data. We answer within a reasonable time.

Questions about this policy, or a request about your data, can be sent to the support address shown in the product’s help menu. If this policy changes we publish a new version with a new version number, alongside the Terms of Service.